FinCrib ("we," "us," or "our") is a free platform that helps homeowners track home value, equity, loan details, and refinance opportunities. We take your privacy seriously and want to be transparent about what data we collect and how we use it.
1. Information We Collect
Account Information
- Email address — used to create your account, send alerts, and communicate with you
- Google account info — if you sign up via Google OAuth, we receive your name and email from Google
Property & Mortgage Data
- Home address — used to look up property details and track your home's estimated value
- Mortgage details — loan balance, interest rate, loan term, and monthly payment, which you enter manually or upload via a mortgage statement
Mortgage PDF Uploads
You can upload a mortgage statement PDF so we can auto-extract your loan details. The PDF is sent to OpenAI's API for data extraction, and we do not permanently store the PDF file itself. Once the relevant data (balance, rate, term, payment) is extracted, the file is discarded. Only the structured data points are saved to your account.
Usage Data
- Alert preferences (e.g., refinance rate thresholds, equity milestones)
- Basic analytics such as pages visited and feature usage to improve the product
What We Don't Collect
We do not collect your Social Security number, credit score, bank account details, or credit card information. FinCrib is free — there's nothing to pay for.
2. How We Use Your Data
- Provide the service — track your home value, equity, and mortgage details
- Send alerts — notify you about refinance opportunities, equity milestones, and market changes
- Improve the product — understand how features are used so we can make FinCrib better
- Communicate with you — account-related emails and occasional product updates (you can opt out anytime)
3. How We Store & Protect Your Data
Your data is stored in Supabase, a hosted PostgreSQL platform with:
- Row-Level Security (RLS) — each user can only access their own data
- Encryption at rest — your data is encrypted on disk
- HTTPS everywhere — all data in transit is encrypted via TLS
Our application is hosted on Cloudflare Pages and uses Cloudflare Workers for API endpoints, benefiting from Cloudflare's global security infrastructure.
4. Third-Party Services
We use a limited number of third-party services to power FinCrib:
- Zillow — to look up property details and estimated home values based on your address
- OpenAI — to extract mortgage data from uploaded PDF statements (PDFs are processed and not stored by us)
- Google OAuth — for optional single sign-on authentication
- Cloudflare — for hosting, CDN, and API infrastructure
- Mortgage News Daily / U.S. Treasury — for current mortgage rate and treasury yield data
These services have their own privacy policies. We only share the minimum data necessary for each service to function.
5. Cookies & Local Storage
FinCrib uses localStorage in your browser to store your authentication session token. We do not use third-party tracking cookies. We may use basic, privacy-friendly analytics in the future — if so, we'll update this policy.
6. Partner & Lead Generation Disclosure
In the future, FinCrib may connect you with lending, refinancing, HELOC, or insurance partners who can help you act on opportunities we surface (e.g., a refinance that could save you money).
We will only share your information with partners with your explicit consent. You'll always have the choice to opt in — we won't share your data behind the scenes. We do not and will not sell your personal data to third parties.
7. Your Rights
You have the right to:
- Access your data — view all the information we have about you in your dashboard
- Export your data — request a copy of your data at any time
- Delete your data — request deletion of your account and all associated data
- Opt out of communications — unsubscribe from non-essential emails
To exercise any of these rights, email us at support@fincrib.com.
8. California Privacy Rights (CCPA)
If you're a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- The right to know what personal information we collect and how it's used
- The right to request deletion of your personal information
- The right to opt out of the sale of personal information — we do not sell your data
- The right to non-discrimination for exercising your privacy rights
To make a CCPA request, contact us at support@fincrib.com.
9. Children's Privacy
FinCrib is not intended for anyone under 18. We do not knowingly collect data from minors.
10. Changes to This Policy
We may update this privacy policy from time to time. If we make significant changes, we'll notify you via email or a notice on the site. Your continued use of FinCrib after changes means you accept the updated policy.
11. Contact Us
Questions or concerns? Reach out anytime:
📧 support@fincrib.com